Method for implementing authentication by entity authentication centre

Abstract

This invention discloses an authentication method realized by an entity authentication center(EAC) including: the EAC gets an authentication mode meeting the safety grade supported by EAC and said service entity based on the required safety grade and signed information of said entity, EAC and said entity authenticate in the mode and negotiate to generate a shared cryptographic key, EAC distributes safety grade to the key and distributes related information to the entity asking for authentication and stores the association of the related information, shared key and its safety grade in EAC and said service entity, in this invention, EAC provides authentication of different safety grades to service entities and different services among different entities set up trust relationship of different safety levels for communication.

Description

technical field [0001] The invention relates to general authentication technology, in particular to a method for implementing authentication by an Entity Authentication Center (EAC, EntityAuthentication Center). Background technique [0002] Fig. 1 is a schematic diagram of an end-to-end communication authentication architecture in the prior art. As shown in Fig. 1, this architecture is applicable to different mobile network standards, and its function is to establish a mutual trust relationship between different types of entities, which is a real sense of A common authentication framework. The network elements involved in the authentication architecture shown in Figure 1 include three business entities: Service Subscriber (SS, Service Subscriber), Service Subscriber / Provider (SSP, Service Subscriber and Provider), and Service Provider (SP, Service Provider) In addition, the operator network also includes an EAC and an Entity Subscription Database (ESD, Entity Subscription ...

AI Technical Summary

Problems solved by technology

However, the existing general authentication framework does not divide the security level of authentication and key negotiation between EAC and business entities, so that EAC cannot provide business entities with authentication of different security levels, so that derived keys that meet the business security level requirements cannot be obtained. key, it is not convenient for operators to carry out more reasonable and accurate billing for services with different security level requirements, and cannot well adapt to the needs of business development

Images